System, method, and computer device for data integrity validation

Abstract

A system, method, and device for data integrity validation are provided. The system includes a database for storing user data, a black box device for locally answering queries received from an end user device without revealing the stored user data, and end user device. The black box device includes memory for storing the user data, data filters, filtered data, the queries received from the end user device, query results, and excluded query result data and processor in communication with the memory. Processor is configured to generate the filtered data, determine whether each query received that addresses the filtered data is permitted, provide a response to each permitted query based on the generated filtered data, generate the excluded query result data by excluding stored user data that would facilitate identifying any user from the response to each permitted query, and transmit the excluded query result data to the end user device.

The invention claimed is: 
     
       1. A system for data integrity validation, the system comprising:
 a user database for storing user data of a user; 
 a black box device for locally answering queries received from an end user device without revealing the stored user data, the black box device comprising:
 a memory for storing the user data, data filters, filtered data, the queries received from the end user device, results of the queries, and excluded query result data; and 
 a processor in communication with the memory, the processor configured to:
 generate the filtered data based on the stored user data and the data filters; 
 determine whether each query received that addresses the filtered data is permitted based on properties of the query; 
 determine whether the query, if answered locally, would produce a result that would facilitate identifying any particular user; 
 provide a response to each permitted query based on the generated filtered data; 
 generate the excluded query result data by excluding from the response to each permitted query non-permitted stored user data and stored user data that would facilitate identifying any particular user; and 
 transmit the excluded query result data to the end user device; 
 
 
 the end user device configured to:
 receive the queries from an end user; 
 transmit the queries to the black box device; and 
 display the excluded query result data to the end user; 
 
 wherein the black box device further comprises a permissions matrix for storing circumstances under which the user allows the user data to be used to respond to the queries and wherein the user data is not used to respond to the queries unless circumstances provided by the end user device are included in the permissions matrix. 
 
     
     
       2. The system of  claim 1 , wherein the permissions matrix notifies the user when the circumstances provided by the end user device are not included in the permissions matrix, and wherein the permissions matrix is configured to receive permission from the user to allow the user data to be used to respond to the queries when the circumstances provided by the end user device are included in the permissions matrix. 
     
     
       3. The system of  claim 1 , wherein use by the end user of the excluded query result data is audited to confirm that the use by the end user matches the circumstances provided by the end user device. 
     
     
       4. The system of  claim 1 , wherein the black box device further comprises a minimum bid amount for which the user allows the user data to be used to respond to the queries and wherein the user data is not used to respond to the queries unless a bid by the end user device meets or exceeds the minimum bid amount. 
     
     
       5. The system of  claim 4 , wherein the minimum bid amount includes a first minimum bid amount for anonymous disclosure of the user data, a second minimum bid amount for semi-anonymous disclosure of the user data, the second minimum bid amount being higher than the first minimum bid amount, and a third minimum bid amount for non-anonymous disclosure of the user data, the third minimum bid amount being higher than the second minimum bid amount. 
     
     
       6. The system of  claim 1  further comprising a user device for providing the user data. 
     
     
       7. The system of  claim 1 , wherein the user data is gathered from any one or more of online activities of the user, purchase patterns of the user, and physical movement of the user. 
     
     
       8. A method for facilitating data integrity validation, the method comprising:
 receiving user data pertaining to one or more users; 
 receiving data filters to be applied to the user data; 
 applying the data filters to the user data to generate filtered data; 
 receiving a query from an end user device; 
 determining that the query received is permitted based on properties of the query; 
 determining that the query, if answered locally, would not produce a result that would facilitate identifying any particular user; 
 providing a response to the permitted query using the filtered data; 
 generating excluded query result data by excluding from the response to each permitted query non-permitted user data and user data that would facilitate identifying any particular user; 
 transmitting the excluded query result data to the end user; and 
 storing circumstances under which the user allows the user data to be used to respond to the query in a permissions matrix and not allowing the user data to be used to respond to the query unless circumstances provided by the end user are included in the permissions matrix. 
 
     
     
       9. The method of  claim 8 , further comprising:
 the permissions matrix notifying the user when the circumstances provided by the end user device are not included in the permissions matrix; and 
 the permissions matrix receiving permission from the user to allow the user data to be used to respond to the queries when the circumstances provided by the end user device are included in the permissions matrix. 
 
     
     
       10. The method of  claim 8  further comprising auditing use by the end user of the excluded query result data to confirm that the use by the end user matches the circumstances provided by the end user device. 
     
     
       11. The method of  claim 8  further comprising allowing the user data to be used to respond to the queries when a bid by the end user device meets or exceeds a minimum bid amount and not allowing the user data to be used to respond to the query if the bid by the end user does not meet or exceed the minimum bid amount. 
     
     
       12. The method of  claim 11 , wherein the minimum bid amount includes a first minimum bid amount for anonymous disclosure of the user data, a second minimum bid amount for semi-anonymous disclosure of the user data, the second minimum bid amount being higher than the first minimum bid amount, and a third minimum bid amount for non-anonymous disclosure of the user data, the third minimum bid amount being higher than the second minimum bid amount. 
     
     
       13. A black box device for locally answering queries received from an end user device without revealing stored user data, the black box device comprising:
 a memory for storing the user data of a user, data filters, filtered data, the queries received from the end user device, results of the queries, and excluded query result data; and 
 a processor in communication with the memory, the processor configured to:
 generate the filtered data based on the stored user data and the data filters; 
 determine whether each query received that addresses the filtered data is permitted based on properties of the query; 
 determine whether the query, if answered locally, would produce a result that would facilitate identifying any particular user; 
 provide a response to each permitted query based on the generated filtered data; 
 generate the excluded query result data by excluding from the response to each permitted query non-permitted stored user data and stored user data that would facilitate identifying any particular user; and 
 transmit the excluded query result data to the end user device; and 
 
 a permissions matrix for storing circumstances under which the user allows the user data to be used to respond to the queries, wherein the user data is not used to respond to the queries unless circumstances provided by the end user are included in the permissions matrix. 
 
     
     
       14. The device of  claim 13 , wherein the permissions matrix notifies the user when the circumstances provided by the end user device are not included in the permissions matrix, and wherein the permissions matrix is configured to receive permission from the user to allow the user data to be used to respond to the queries when the circumstances provided by the end user device are included in the permissions matrix. 
     
     
       15. The device of  claim 13 , wherein use by the end user of the excluded query result data is audited to confirm that the use by the end user matches the circumstances provided by the end user device. 
     
     
       16. The device of  claim 13  further comprising a minimum bid amount for which the user allows the user data to be used to respond to the queries, wherein the user data is not used to respond to the queries unless a bid by the end user device meets or exceeds the minimum bid amount. 
     
     
       17. The device of  claim 16 , wherein the minimum bid amount includes a first minimum bid amount for anonymous disclosure of the user data, a second minimum bid amount for semi-anonymous disclosure of the user data, the second minimum bid amount being higher than the first minimum bid amount, and a third minimum bid amount for non-anonymous disclosure of the user data, the third minimum bid amount being higher than the second minimum bid amount.